Blockstream Alerts Jade Wallet Users About New Phishing Scam

Highlights:

• Blockstream warns users against phishing emails posing as Jade wallet firmware updates.
• Experts say phishing scams rise because tricking people is easier than hacking devices.
• Security teams uncover ModStealer malware stealing crypto wallet data across multiple systems.

Blockstream, the company behind the Jade hardware wallet, warned users about a phishing scam targeting its customers. The fake emails pretend to be from Blockstream and tell users to click a link to download a new firmware update. Phishing scams like this are meant to trick people into giving away their crypto or personal information.

Blockstream quickly warned users, saying the devices are safe and were not affected. The company reminded users that real updates are only available on its official website or GitHub, and it never sends them by email. Blockstream also advised on staying safe from scams like this. They said phishing works because it’s easier to trick people than to hack devices. 

🚨 Phishing Alert 🚨

We’ve been made aware of fake emails claiming a “Jade firmware update.”

1⃣ This was not sent from Blockstream.
2⃣ Blockstream will never email you firmware files.
3⃣ No data has been compromised.

Don’t Trust. Verify.

Please follow @Blockstream and… pic.twitter.com/59ymAZ6NDB

— Blockstream (@Blockstream) September 12, 2025

Blockchain released the Jade wallet in 2021 for about $65 as a budget-friendly hardware wallet. It was cheaper than many advanced cold storage devices and competed with products like Ledger and Trezor. Because of this, scammers saw that the easiest way to get past its strong security was to target the users directly instead of the device.

Rising Crypto Scams

According to anti-scam service Scam Sniffer, phishing scams stole over $12 million from crypto users in August, affecting more than 15,000 people, a 67% jump from July. As these scams become more advanced and varied, crypto users need to be extra careful online and take strong safety steps to protect their money and personal information. Crypto users lost more than $3.1 billion to scams and hacks in the first half of 2025, which is already more than all of 2024, according to blockchain security firm Hacken.

🚨 ScamSniffer August 2025 Phishing Report

August losses: $12.17M | 15,230 victims
VS July: +72% in losses | +67% in victims

Key insight: Sharp escalation driven by EIP-7702 batch-signature scams and direct transfers to phishing contracts. 3 whale hits totaled $5.62M (46%).… pic.twitter.com/l3NJRryuxw

— Scam Sniffer | Web3 Anti-Scam (@realScamSniffer) September 6, 2025

Scammers hit big companies, with Orbit Bridge losing $305 million in April and Kraken $110 million in June. Phishing scams trick people by hiding dangerous links inside messages that look like they come from trusted crypto companies.  These fake emails often pretend to be customer support and warn about things like account closure, theft, or a security issue.  They then pressure users to share private keys or passwords, which lets scammers steal their funds.

Protecting Crypto Wallets from Scams and New Malware Threats

Users can protect themselves from phishing scams by carefully checking website addresses to make sure they are real. Scammers often make fake URLs that look almost the same as the real ones, changing small details like replacing the letter “o” with the number zero or adding/removing dots. It’s safer to bookmark official websites instead of typing them in or relying on search engines, since even paid ads on Google can be fake. Other safety tips include avoiding links from unknown senders, using a VPN to hide your IP address, and watching for spelling or grammar mistakes in emails and websites.

Moreover, security experts have recently uncovered a new type of malware that specifically targets cryptocurrency wallets. The program, named ModStealer, is capable of stealing private keys and sensitive wallet data from devices running Windows, macOS, and Linux.

Researchers uncovered ModStealer, a cross-platform malware that drains crypto from browser wallets.

• It spreads via fake recruiter ads and hides as a background helper.
• Targets wallet extensions, credentials and seed phrases.
• Runs on Windows, Linux, and macOS.

A single… pic.twitter.com/XFelomyumM

— Web3 Antivirus (@web3_antivirus) September 12, 2025